From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Thu, 09 Mar 2006 13:47:00 GMT
Subject: Re: [PATCH] Add git-imap-send.
Message-ID: <Pine.LNX.4.63.0603091445280.21440@wbgn013.biozentrum.uni-wuerzburg.de>
In-Reply-To: <slrne10b8c.fr9.mdw@metalzone.distorted.org.uk>

Hi,

On Thu, 9 Mar 2006, Mark Wooding wrote:

> There are reasons for which it'd be desirable that memcmp really compare
> all the bytes, even if it can in theory stop early: in particular, there
> are cases where early exit can leak timing information which makes it
> possible to attack cryptographic protocols.

I would be astonished if memcmp has to be timing proof for *all* 
applications, just to keep crypto people happy. I don't *want* a slow-down 
in my super-duper 3d shooter.

> I'd have to recommend strncmp for this job.

Fully agree.

Ciao,
Dscho